Harden stable release publication and Homebrew installation

.env.example

@@ -8,3 +8,13 @@ AUTOHAND_API_URL=https://api.autohand.ai
 # This is required for feedback and telemetry submission
 # Contact your Autohand administrator for the secret key
 AUTOHAND_SECRET=your-company-secret-here
+
+# Context Management Configuration
+# Enable/disable context compaction ('true' | 'false', default: true)
+# AUTOHAND_CONTEXT_COMPACT=true
+# Override context window size for the current model (number, in tokens)
+# AUTOHAND_CONTEXT_WINDOW=128000
+# Tokens to reserve for model output (number, default: 16000)
+# AUTOHAND_RESERVE_TOKENS=16000
+# Optional Open Research service origin for local publication contract testing.
+AUTOHAND_OPEN_RESEARCH_URL=https://openresearch.autohand.ai

.github/ISSUE_TEMPLATE/model_catalog.yml

@@ -0,0 +1,77 @@
+name: Add model catalog entry
+description: Add a supported provider model ID to the bundled Autohand catalog through an automated pull request
+title: "[Model]: "
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Use this maintainer form to add one model to `src/providers/models.json`.
+        Requests opened by repository owners, members, or collaborators create a pull request for manual review. The workflow never merges or approves its own pull request.
+
+  - type: dropdown
+    id: provider
+    attributes:
+      label: Provider
+      description: Select the built-in provider whose catalog should receive the model.
+      options:
+        - openrouter
+        - ollama
+        - openai
+        - llmgateway
+        - azure
+        - zai
+        - sakana
+        - vertexai
+        - xai
+        - cerebras
+        - nvidia
+        - deepseek
+        - bedrock
+        - llamacpp
+        - mlx
+    validations:
+      required: true
+
+  - type: input
+    id: model_id
+    attributes:
+      label: Model ID
+      description: Enter the exact provider model card or API model identifier.
+      placeholder: vendor/model-name
+    validations:
+      required: true
+
+  - type: input
+    id: display_name
+    attributes:
+      label: Display name
+      description: Optional human-readable label for model pickers.
+      placeholder: Model Name
+
+  - type: input
+    id: context_window
+    attributes:
+      label: Context window
+      description: Optional positive integer context-window size in tokens.
+      placeholder: "131072"
+
+  - type: dropdown
+    id: reasoning_effort
+    attributes:
+      label: Reasoning effort
+      description: Optional reasoning-effort metadata for the model.
+      options:
+        - Not specified
+        - No reasoning
+        - low
+        - medium
+        - high
+        - xhigh
+
+  - type: checkboxes
+    id: confirmation
+    attributes:
+      label: Confirmation
+      options:
+        - label: I verified this exact model ID with the selected provider and did not include credentials or other secrets.
+          required: true

.github/dependabot.yml

@@ -0,0 +1,48 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:00"
+      timezone: Pacific/Auckland
+    open-pull-requests-limit: 10
+    versioning-strategy: increase
+    labels:
+      - dependencies
+      - javascript
+    commit-message:
+      prefix: deps
+      prefix-development: deps-dev
+      include: scope
+    groups:
+      production-dependencies:
+        dependency-type: production
+        update-types:
+          - minor
+          - patch
+      development-dependencies:
+        dependency-type: development
+        update-types:
+          - minor
+          - patch
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+      time: "09:30"
+      timezone: Pacific/Auckland
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - github-actions
+    commit-message:
+      prefix: deps
+      include: scope
+    groups:
+      github-actions:
+        patterns:
+          - "*"